← Google Trust Services LLC cases
Bugzilla #1931413
CCADB Compliance
Google Trust Services: New hire onboarding deviation from written procedure
RESOLVED
FIXED
Google Trust Services LLC
AI Summary
Google Trust Services (GTS) identified deviations in their onboarding process for new hires, where access group memberships were granted out of order compared to documented procedures. Although these deviations did not result in premature access to CA systems, they highlighted opportunities for process improvement. GTS has since revised their access request procedures, reduced the number of steps involved, and simplified the sequencing of onboarding tasks. All action items related to this incident have been completed, and GTS remains committed to continual improvement.
Chronology
- Incident identified during new hire onboarding.
- Incident report published detailing process deviations.
- All action items completed and process improvements implemented.
Participants
gts-external@google.com
bwilson@mozilla.com
External References
Similar Local Cases
Google Trust Services: Failure to provide regular and timely incident updates
Google Trust Services: Delayed publication of CPS removing DNS Operator Exception
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
Microsoft PKI Services: Vulnerability Management Exception Tracking
Sectigo: CCADB failed ALV - Network Solutions Certificate Authority
IdenTrust: Missing Thumbprints for Intermediate CA certificates In Some Annual Audit Reports
Chunghwa Telecom: Delayed to Submit Annual CCADB Self-Assessment 2024 by GTLSCA.
NISZ Nemzeti Infokommunikacios Szolgaltato: Missing Contact Information in CCADB